version: '2'
services:
nginx:
build: ./nginx
# depends_on:
# - mitmpassive
# ports:
# - "80:80"
network_mode: host
volumes:
- mitmoutput:/files
frontend:
build: ./frontend
restart: always
network_mode: host
webhooks:
build: ./webhook
privileged: true
restart: always
command: ["webhook","-hooks","/opt/webhooks/hooks.json","-port","8080","-verbose", "-header", "Access-Control-Allow-Origin=*", "-header", "Access-Control-Allow-Methods=GET,PUT"]
ports:
- "12345:8080"
volumes:
- mitmoutput:/opt/mitmoutput
labels:
io.resin.features.balena-socket: '1'
environment:
internalport: 8080
mitmpassive:
image: quay.io/realeyes/mitmproxy-rpi3:4.0.3
command: ["/usr/bin/mitmweb","-p","8888","--web-iface","127.0.0.1","--web-port","8080","--mode","transparent","--showhost","-w","+/swap/defaultcapture"]
# command: ["/usr/bin/mitmweb","-p","8888","--web-iface","127.0.0.1","--web-port","8080","--mode","transparent","--showhost","-w","+/opt/mitmoutput/Capture"]
network_mode: host
environment:
max_mem_in_kb: 450000
mem_limit: 550m
mem_reservation: 500m
# healthcheck:
# test: ["CMD-SHELL", "if [ $(free -m | grep Mem: | awk '{print $3}') -le ${max_mem_in_kb} ]; then exit 0; else exit 1; fi"]
# start_period: 40s
restart: unless-stopped
volumes:
- mitmoutput:/opt/mitmoutput
- swap:/swap
# mitmweb:
# image: quay.io/realeyes/mitmproxy-rpi3:4.0.3
# command: ["/usr/bin/mitmweb","-p","8888","--web-iface","127.0.0.1","--web-port","8080","--mode","transparent","--showhost","-w","+/swap/defaultcapture"]
# command: ["/usr/bin/mitmweb","-p","8888","--web-iface","127.0.0.1","--web-port","8080","--mode","transparent","--showhost","-w","/opt/mitmoutput/defaultcapture"]
# network_mode: host
# environment:
# max_mem_in_kb: 450000
# mem_limit: 550m
# mem_reservation: 500m
# healthcheck:
# test: ["CMD-SHELL", "if [ $(free -m | grep Mem: | awk '{print $3}') -le ${max_mem_in_kb} ]; then exit 0; else exit 1; fi"]
# start_period: 40s
# restart: unless-stopped
# volumes:
# - mitmoutput:/opt/mitmoutput
# - swap:/swap
# ports:
# - "8888:8888"
# expose:
# - "8080"
iptables:
build: ./iptables
privileged: true
restart: no
network_mode: host
# File Parse script now run directly on webhooks service
# fileparse:
# build: ./fileparse
# restart: no
# network_mode: host
# volumes:
# - mitmoutput:/opt/mitmoutput:ro
# file-manager:
# build: ./file-access
# command: ["node","--harmony","index.js","-p","8999","-d","/files"]
# restart: always
# volumes:
# - mitmoutput:/files
# network_mode: host
# landingpage:
# build: ./landing-page
# network_mode: host
volumes:
mitmoutput:
swap: